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I (57) Abstract: 

I PURPOSE: To cope with an infringement of 
security that a wrong intruder from one 
j system wrongfully accesses another system 
j in open systems. 

j CONSTITUTION; At least one or more 
I security audit server (SO) is provided in open 
I distributed network systems. (SSI , SS2, 
\ SS3...) and this SO always extracts and 
I analyzes security messages (M L etc.) which 
| are transmitted from work stations (WS 1 L 
etc.) connected to networks and are related to 
the infringement of security and collects and 
j accumulates the results. In the case of the 
[message which may have an influence upon 
{systems, a security report related to this 
[message is generated. All security reports are 
synthetically analyzed to diagnose the weak 
1 points of systems, and the proper change of 
| the security policy is requested to actual 
(systems. 
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